PR.IR-02: The organization’s technology assets are protected from environmental threats

Develop a contingency plan for the system that: Identifies essential mission and business functions and associated contingency requirements; Provides recovery objectives, restoration priorities, and metrics; Addresses contingency roles, responsibilities, assigned individuals with contact information; Addresses maintaining essential mission and business functions despite a system disruption, compromise, or failure; Addresses eventual, full system restoration without deterioration…

Protect power equipment and power cabling for the system from damage and destruction.

Provide the capability of shutting off power to [Assignment: organization-defined system or individual system components] in emergency situations; Place emergency shutoff switches or devices in [Assignment: organization-defined location] to facilitate access for authorized personnel; and Protect emergency power shutoff capability from unauthorized activation.

Provide an uninterruptible power supply to facilitate [Assignment: an orderly shutdown of the system, transition of the system to long-term alternate power] in the event of a primary power source loss.

Employ and maintain automatic emergency lighting for the system that activates in the event of a power outage or disruption and that covers emergency exits and evacuation routes within the facility.

Employ and maintain fire detection and suppression systems that are supported by an independent energy source.

Maintain [Assignment (one or more): temperature, humidity, pressure, radiation, [Assignment: organization-defined environmental control] ] levels within the facility where the system resides at [Assignment: organization-defined acceptable levels] ; and Monitor environmental control levels [Assignment: organization-defined frequency].

Protect the system from damage resulting from water leakage by providing master shutoff or isolation valves that are accessible, working properly, and known to key personnel.

Position system components within the facility to minimize potential damage from [Assignment: organization-defined physical and environmental hazards] and to minimize the opportunity for unauthorized access.

Plan the location or site of the facility where the system resides considering physical and environmental hazards; and For existing facilities, consider the physical and environmental hazards in the organizational risk management strategy.